专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明公开

US20230146636A1 SYSTEM AND METHOD OF DETECTING ABNORMAL ACT THREATENING TO SECURITY BASED ON ARTIFICIAL INTELLIGENCE 审中-公开
公开(公告)号：US20230146636A1
公开(公告)日：2023-05-11
申请号：US17972655
申请日：2022-10-25
申请人： Korea Internet & Security Agency
发明人： Do Won KIM , Tae Eun KIM , Ki Jong SON , Seul Ki CHOI , Jong Ki KIM
IPC分类号： G06F21/55 , G06N20/00
CPC分类号： G06F21/554 , G06N20/00 , G06F2221/034
摘要： Disclosed is a system and a method of detecting an abnormal act threatening to security based on artificial intelligence according to the present invention, and, more particularly, a system and a method of detecting an abnormal act threatening to security based on artificial intelligence that are capable of rapidly carrying out pre-processing of a large-scaled data set based on multi processing, and efficiently detecting the abnormal act threatening to security via various pieces of security device on the basis of studied artificial intelligence.

2. 发明申请

US20220383298A1 METHOD AND APPARATUS FOR IDENTIFYING WALLETS ASSOCIATED WITH VIRTUAL ASSET SERVICE PROVIDERS 有权
公开(公告)号：US20220383298A1
公开(公告)日：2022-12-01
申请号：US17817824
申请日：2022-08-05
申请人： KOREA INTERNET & SECURITY AGENCY , Lambda256, CO., LTD
发明人： Yong Hee SHIN , Moon Hee CHO , Kyeong Han KIM , Dae Il JANG , Seung Goo JI , Jae Hoon OH
IPC分类号： G06Q20/36
摘要： A method for identifying a wallet address associated with a virtual asset service provider is provided. The method comprises receiving a target wallet address, obtaining a transaction of a virtual asset associated with the target wallet address, obtaining a list of a plurality of known wallet addresses of virtual asset service providers (VASPs) and identifying a type of the target wallet address, by performing at least one of a cold wallet determination routine and a hot wallet determination routine for the target wallet address, based on the transaction and the list of known wallet addresses of the VASPs.

3. 发明授权

US11245712B2 Method and apparatus for generating virtual malicious traffic template for terminal group including device infected with malicious code 有权
公开(公告)号：US11245712B2
公开(公告)日：2022-02-08
申请号：US16517500
申请日：2019-07-19
申请人： KOREA INTERNET & SECURITY AGENCY
发明人： Sung Taek Oh , Woong Go , Mi Joo Kim , Jae Hyuk Lee , Jun Hyung Park
IPC分类号： H04L29/06 , G06N20/00
摘要： There is provided a method of generating malicious traffic, the method being performed by a computing apparatus and comprising obtaining traffic data transmitted from a first device infected with first malicious code or received by the first device, generating a traffic template of the first device by analyzing the traffic data, and generating a malicious traffic template of a terminal group, wherein the malicious traffic template of the terminal group comprises the traffic template of the first device.

4. 发明申请

US20210160253A1 METHODS AND SYSTEMS FOR IDENTIFYING AN IOT DEVICE 有权
公开(公告)号：US20210160253A1
公开(公告)日：2021-05-27
申请号：US16843834
申请日：2020-04-08
申请人： Korea Internet & Security Agency
发明人： Jae Hyuk Lee , Woong Go , Hong Geun Kim , Mi Joo Kim , Sung Taek Oh , Soon Tai Park
IPC分类号： H04L29/06 , H04L29/08
摘要： Provided are methods and systems for identifying an Internet of things (IoT) device. A method of clustering an Internet of things (IoT) device, the method comprises determining a device group to which the IoT device belongs by applying the network packet of the IoT device obtained from the device identification apparatus to the clustering model, transmitting device group information according to the determination to the device identification apparatus and obtaining detailed identification information of the IoT device from the device identification apparatus, wherein the detailed identification information comprises a detailed model of the IoT device analyzed using the device group information.

5. 发明授权

US10945117B1 Method and apparatus for detecting diameter protocol IDR message spoofing attack in mobile communication network 有权
公开(公告)号：US10945117B1
公开(公告)日：2021-03-09
申请号：US16832747
申请日：2020-03-27
申请人： KOREA INTERNET & SECURITY AGENCY
发明人： Seong Min Park , Young Kwon Park , Bo Min Choi , Eun Hye Ko , Tae Eun Kim , Jin Hyun Cho , Do Won Kim , Hyung Jin Cho , Hwan Kuk Kim
IPC分类号： H04W8/18 , H04W8/12 , H04W12/06 , H04W8/04 , H04L29/12 , H04L29/06
摘要： Provided are methods of detecting a Diameter spoofing attack. According to an embodiment, the method comprises, obtaining a normal International Mobile Subscriber Identity (IMSI) from a packet of a Diameter S6a protocol transmitted from a Mobile Management Entity (MME) to a Home Subscriber Server (HSS) of a home network, adding a record comprising the normal IMSI to a session table, obtaining an Insert Subscriber Data Request (IDR) message of the Diameter S6a protocol and determining a category of the IDR message.

6. 发明申请

US20140317737A1 HYPERVISOR-BASED INTRUSION PREVENTION PLATFORM AND VIRTUAL NETWORK INTRUSION PREVENTION SYSTEM 审中-公开
标题翻译：基于超级基础的入侵预防平台和虚拟网络入侵预防系统
公开(公告)号：US20140317737A1
公开(公告)日：2014-10-23
申请号：US13871264
申请日：2013-04-26
申请人： KOREA INTERNET & SECURITY AGENCY
发明人： YOUNG-SANG SHIN , II-Ahn Cheong , Seul-Gi Lee , Mi-Yeon Yoon , Tong-Wook Hwang , Kyung-Ho Son
IPC分类号： H04L29/06
CPC分类号： H04L63/1408 , H04L63/20
摘要： Hypervisor-based intrusion prevention platform is provided. The hypervisor-based intrusion prevention platform comprises a virtual network intrusion prevention system (vIPS) framework which obtains internal information of a virtualization system from a hypervisor and performs security control on the hypervisor in response to the result of intrusion detection carried out by using the internal information of the virtualization system, a hypervisor security application programming interface (API) module which provides an API used by the vIPS framework to access the hypervisor, an administrator account management and authentication module which manages an administrator account of a vIPS and authenticates the administrator account, an environment setting management module which manages environment setting values of modules within the vIPS, and an external interface module which provides an interface for system control and security control.
摘要翻译：提供基于管理程序的入侵防御平台。基于虚拟机管理程序的入侵防御平台包括虚拟网络入侵防御系统（vIPS）框架，从虚拟机管理程序获取虚拟化系统的内部信息，并对管理程序进行安全控制，以响应通过使用内部虚拟化系统的信息，提供由vIPS框架用于访问管理程序的API的管理程序安全应用程序编程接口（API）模块，管理vIPS的管理员帐户并管理管理员帐户的管理员帐户管理和验证模块管理vIPS内的模块的环境设定值的环境设定管理模块，以及提供用于系统控制和安全控制的接口的外部接口模块。

7. 发明申请

US20130160127A1 SYSTEM AND METHOD FOR DETECTING MALICIOUS CODE OF PDF DOCUMENT TYPE 审中-公开
标题翻译：用于检测PDF文件类型的恶意代码的系统和方法
公开(公告)号：US20130160127A1
公开(公告)日：2013-06-20
申请号：US13657303
申请日：2012-10-22
申请人： Hyun Cheol Jeong , Seung Goo Ji , Tai Jin Lee , Jong Il Jeong , Hong Koo Kang , Byung Ik Kim
发明人： Hyun Cheol Jeong , Seung Goo Ji , Tai Jin Lee , Jong Il Jeong , Hong Koo Kang , Byung Ik Kim
IPC分类号： G06F21/00
CPC分类号： G06F21/566
摘要： Disclosed herein is a PDF document type malicious code detection system for efficiently detecting a malicious code embedded in a document type and a method thereof. The present invention may perform a dynamic and static analysis on JavaScript within a PDF document, and execute the PDF document to perform a PDF dynamic analysis, thereby achieving an effect of efficiently extracting a malicious code embedded in the PDF document.
摘要翻译：这里公开了一种用于有效地检测嵌入在文档类型中的恶意代码的PDF文档类型的恶意代码检测系统及其方法。本发明可以对PDF文档中的JavaScript进行动态和静态分析，并且执行PDF文档来执行PDF动态分析，从而实现有效地提取嵌入PDF文档中的恶意代码的效果。

8. 发明申请

US20120167220A1 SEED INFORMATION COLLECTING DEVICE AND METHOD FOR DETECTING MALICIOUS CODE LANDING/HOPPING/DISTRIBUTION SITES 审中-公开
标题翻译：收集信息的收集信息和检测恶意代码登陆/篡改/分发站点的方法
公开(公告)号：US20120167220A1
公开(公告)日：2012-06-28
申请号：US13304986
申请日：2011-11-28
申请人： Jong-Il Jeong , Chae-Tae Im , Joo-Hyung Oh , Hong-Koo Kang , Jin-Kyung Lee , Byoung-Ik Kim , Seung-Goo Ji , Tai-Jin Lee , Hyun-Cheol Jeong
发明人： Jong-Il Jeong , Chae-Tae Im , Joo-Hyung Oh , Hong-Koo Kang , Jin-Kyung Lee , Byoung-Ik Kim , Seung-Goo Ji , Tai-Jin Lee , Hyun-Cheol Jeong
IPC分类号： G06F11/00
CPC分类号： G06F21/563
摘要： Provided is seed information collecting device for detecting malicious code landing/hopping/distribution sites. The device comprises: a seed information collecting module collecting social issue keywords from a seed information collecting channel and collecting address information of potential malicious code landing/hopping/distribution sites using the collected social issue keywords; a web source code collecting module collecting web source code of the potential malicious code landing/hopping/distribution sites using the address information of the potential malicious code landing/hopping/distribution sites collected by the seed information collecting module; and a policy management module managing collection policies of the seed information collecting module and the web source code collecting module.
摘要翻译：提供了用于检测恶意代码登陆/跳跃/分发站点的种子信息收集装置。该装置包括：种子信息收集模块，从种子信息采集通道收集社会问题关键词，并使用所收集的社会问题关键词收集潜在的恶意代码登陆/跳出/分发站点的地址信息; 网站源代码收集模块，利用种子信息收集模块收集的潜在恶意代码登陆/跳跃/分发站点的地址信息，收集潜在恶意代码登陆/分发站点的网站源代码; 以及策略管理模块，其管理种子信息收集模块和web源代码收集模块的收集策略。

9. 发明申请

US20120159625A1 MALICIOUS CODE DETECTION AND CLASSIFICATION SYSTEM USING STRING COMPARISON AND METHOD THEREOF 审中-公开
标题翻译：使用STRING比较的恶意代码检测和分类系统及其方法
公开(公告)号：US20120159625A1
公开(公告)日：2012-06-21
申请号：US13282978
申请日：2011-10-27
申请人： Hyun-Cheol JEONG , Seung-Goo JI , Tai Jin LEE , Jong-Il JEONG , Hong-Koo KANG , Byung-Ik KIM
发明人： Hyun-Cheol JEONG , Seung-Goo JI , Tai Jin LEE , Jong-Il JEONG , Hong-Koo KANG , Byung-Ik KIM
IPC分类号： G06F21/24
CPC分类号： G06F21/562
摘要： The present invention provides a malicious code detection and classification system using a string comparison technique, including a string extracting unit configured to extract all expressed strings existing in a binary file from the malicious code binary file; a string refining unit configured to refine elements obstructing malicious code detection and classification in the strings extracted from the string extracting unit; and a string comparison unit configured to determine how similar one binary is to another binary by comparing strings refined from the string refining unit.
摘要翻译：本发明提供了一种使用字符串比较技术的恶意代码检测和分类系统，包括：字符串提取单元，被配置为从恶意代码二进制文件中提取存在于二进制文件中的所有表达的字符串; 字符串精炼单元，被配置为对从字符串提取单元提取的字符串中的恶意代码检测和分类进行细化的元件; 以及字符串比较单元，被配置为通过比较从字符串精炼单元精炼的字符来确定一个二进制是如何与另一个二进制相似的。

10. 发明申请

US20120159621A1 DETECTION SYSTEM AND METHOD OF SUSPICIOUS MALICIOUS WEBSITE USING ANALYSIS OF JAVASCRIPT OBFUSCATION STRENGTH 有权
标题翻译：使用JAVASCRIPT OBFUSCING强度分析检测系统和可疑恶性网站的方法
公开(公告)号：US20120159621A1
公开(公告)日：2012-06-21
申请号：US13282911
申请日：2011-10-27
申请人： Hyun-Cheol Jeong , Seung-Goo Ji , Tai Jin Lee , Jong-II Jeong , Hong-Koo Kang , Byung-Ik Kim
发明人： Hyun-Cheol Jeong , Seung-Goo Ji , Tai Jin Lee , Jong-II Jeong , Hong-Koo Kang , Byung-Ik Kim
IPC分类号： G06F21/00
CPC分类号： G06F21/51 , G06F21/563 , H04L63/1483
摘要： The present invention provides a detection system of a suspicious malicious website using the analysis of a JavaScript obfuscation strength, which includes: an entropy measuring block of measuring an entropy of an obfuscated JavaScript present in the website, a special character entropy, and a variable/function name entropy; a frequency measuring block of measuring a specific function frequency, an encoding mark frequency and a % symbol frequency of the JavaScript; a density measuring block of measuring the maximum length of a single character string of the JavaScript; and a malicious website confirming block of determining whether the relevant website is malicious by comparing an obfuscation strength value, measured by the entropy measuring block, the frequency measuring block and the density measuring block, with a threshold value.
摘要翻译：本发明提供了一种使用JavaScript混淆强度分析的可疑恶意网站的检测系统，其包括：测量网站中存在的模糊JavaScript的熵的熵测量块，特殊字符熵和可变/ 函数名熵测量特定功能频率的频率测量块，JavaScript的编码标记频率和％符号频率; 测量JavaScript的单个字符串的最大长度的密度测量块; 以及通过将熵测量块测量的混淆强度值，频率测量块和密度测量块与阈值进行比较来确定相关网站是否是恶意的恶意网站确认块。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式